Resources

Case T-262/24 Commission v EDPS

Data Processing Agreement (DPA), Data Sharing, Records of processing Activities (ROPA)

UK ICO – consultation series on generative AI

Adoption of AI, Blockchain and other emerging technologies within the European public sector A Public Sector Tech Watch report by EU Commission

AI, Public Interests

Draft Methodology for Human Rights, Democracy and the Rule of Law Impact Assessment for AI Systems by Council of Europe

AI, Data Protection Impact Assessment (DPIA)

A BLUEPRINT FOR GREECE’S AI TRANSFORMATION

AI, Public Interests

Lawsuit Canadian news vs OpenAI

AI, Copyright

Decision of 19 October 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Andorra

Adequacy Decisions

Decision of 30 June 2003 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Argentina

Adequacy Decisions

Decision of 20 December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act

Adequacy Decisions

Decision of 5 March 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection provided by the Faeroese Act on processing of personal data

Adequacy Decisions

Decision of 21 November 2003 on the adequate protection of personal data in Guernsey

Adequacy Decisions

Decision of 31 January 2011 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the State of Israel with regard to automated processing of personal data

Adequacy Decisions

Decision of 28 April 2004 on the adequate protection of personal data in the Isle of Man

Adequacy Decisions

Decision (EU) 2019/419 of 23 January 2019 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by Japan under the Act on the Protection of Personal Information

Adequacy Decisions

Decision of 8 May 2008 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Jersey

Adequacy Decisions

Decision of 19 December 2012 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by New Zealand

Adequacy Decisions

Decision (EU) 2022/254 of 17 December 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the Republic of Korea under the Personal Information Protection Act

Adequacy Decisions

Decision of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided in Switzerland

Adequacy Decisions

Decision (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2021)4800)

Adequacy Decisions

Decision (EU) 2021/1773 of 28 June 2021 pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom

Adequacy Decisions

Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework

Adequacy Decisions

Decision pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the Eastern Republic of Uruguay with regard to automated processing of personal data

Adequacy Decisions

Decision pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the Eastern Republic of Uruguay with regard to automated processing of personal data

Adequacy Decisions

Decision pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the Eastern Republic of Uruguay with regard to automated processing of personal data

Adequacy Decisions

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

OH Digitale Dienste version 1.2 by German data protection authority

Decision 114/2024 by Belgian Data Protection Authority (in Dutch)

Consent, Employment

First Draft General-Purpose AI Code of Practice by EU Commission

Mobile Applications recommendations for better privacy protection by CNIL (french)

Product Privacy Design

Musk Adds Microsoft to OpenAI Lawsuit, Expanding Antitrust Allegations

Meta’s New Ad Model in the EU: Consent or Contextual Ads?

Consent, Data Subjects Rights

AI tools in recruitment by UK ICO

Discussion Paper: Large Language Models and Personal Data by The Hamburg Commissioner for Data protection and freedom of information

AI Management Essentials by Department for Science, Innovation and Technology

UK to Regulate AI Frontier Models with New Legislation in 2025

AI and the audiovisual sector: navigating the current legal landscape by IRIS European Audiovisual Observatory

Harmonised Standards for the European AI Act by EU Commission

AI Principles and Best Practices for Developers and Employers by U.S. DEPARTMENT OF LABOR

Perplexity AI Faces Lawsuit Over Alleged Copyright Violations by Dow Jones and NY Post

AI Toolkit Tracker

Artificial Intelligence (AI) Toolkit Tracker – more information about the Toolkit by UK ICO

RTL Belgium Ordered to Add “Refuse All” Button to Cookie Banner by Belgian DPA

Consent

Polish National Personal Data Protection Office (UODO)-National Prosecutor’s Office (9/2/2024)

Consent, Controllers and Processors, Data Breaches, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Private individual (7/18/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Municipality of Nepi (6/20/2024)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda Socio-sanitaria Territoriale Rhodense (5/23/2024)

Accuracy, Data Subjects Rights

Spanish Data Protection Authority (aepd)-ASSOCIACIO OASIS CULTURAL (4/26/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-WWPD CINVENTO INTERNATIONAL PATENT TRADING, S.L. (7/10/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NATURGY IBERIA, S.A. (6/10/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Club Balonmano Gijón (6/17/2024)

Consent, Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Committee (4/24/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (6/12/2024)

Accuracy, Principles

Italian Data Protection Authority (Garante)-Olimpia S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-ARRENDAMIENTOS DEUDORES, S.L. (5/7/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Azzurro Club Hotels S.r.l. (5/9/2024)

Access Requests (DSAR), Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/15/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Facile.Energy S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Italian Data Protection Authority (Garante)-Mas s.r.l. (4/13/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mas s.r.l.s. (4/13/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Enel Energia SpA (2/8/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/1/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/29/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK, S.A (4/12/2024)

Consent, Lawfulness of Processing

Data Protection Authority of Brandenburg-Supermarket (7/15/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-INFORMÁTICA MÉDICA, S.L. (11/7/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ALPHA BANK ROMANIA SA. (4/23/2024)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (4/5/2024)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/8/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (2/13/2024)

Consent, Lawfulness of Processing

Hellenic Data Protection Authority (HDPA)-Greek Ministry of Immigration and Asylum (4/2/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE S.A.U. (1/23/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/23/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. (2/22/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-NTT Data Italia S.P.A (2/8/2024)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-HISPAPOST, S.A. (2/1/2024)

Controllers and Processors, Data Processing Agreement (DPA)

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/15/1905)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-VUKMAL TRADE, S.L. (1/24/2024)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/15/1905)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/17/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/31/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Open Bank, S.A. (7/28/2023)

Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-Oney Servicios Financieros E.F.C. (10/23/2023)

Accuracy, Principles

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Disciplinary officer (4/20/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda socio sanitaria territoriale nord Milano, C.F. (12/7/2023)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Polish Minister of Health (12/20/2023)

Data Subjects Rights, Principles, Privacy by Design

Hellenic Data Protection Authority (HDPA)-Municipality (11/7/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/28/2023)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Garðabær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Hafnarfjörður (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Kópavogur (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (11/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (11/27/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (11/22/2023)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Reykjanesbær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavik (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Labor and Welfare Administration (11/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Scionti Selezioni Superiori S.r.l. (10/12/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Compara Facile S.r.l. (7/18/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Private individual (11/15/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (11/16/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Università Telematica E-Campus (7/18/2023)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Spark Car Sharing SRL (10/25/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (11/6/2023)

Consent, Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Company (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/20/2023)

Data Subjects Rights, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-Mednow Medical Center di Giugni Marco (8/31/2023)

Accuracy, Data Subjects Rights, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/11/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Schockholm School borard (10/3/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

French Data Protection Authority (CNIL)-GROUPE CANAL + (10/12/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/30/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (9/26/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Hotel (9/26/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/5/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/30/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (9/7/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Autostrade per l’Italia spa (6/22/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-JOLY DIGITAL, S.L.U. (8/18/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/16/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/28/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/30/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Uipath SRL (8/21/2023)

Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/1/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/1/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (7/31/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (7/27/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (7/18/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NANDIVALE, S.L (7/17/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L. (7/26/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (7/26/2023)

Consent, Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ODAFONE SERVICIOS, S.L.U. (7/3/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-KUGELCHEN PROPIERTIES, S.L. (7/7/2023)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Almennri innheimtu ehf (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-eCommerce 2020 ApS (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Creditinfo Lánstraust hf. (6/27/2023)

Consent, Lawfulness of Processing, Principles

Data Protection Authority of Sweden-Bonnier News AB (6/26/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-La Risorsa Umana.it s.r.l. (3/23/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Piraeus Bank (6/12/2023)

Lawfulness of Processing, Principles, Privacy by Design, Representative

Polish National Personal Data Protection Office (UODO)-Municipality (5/16/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (6/21/2023)

Consent, Lawfulness of Processing

French Data Protection Authority (CNIL)-CRITEO (6/15/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Ama S.p.a. (4/27/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Municipality (5/5/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/14/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/14/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Sorgenia S.p.a. (4/14/2023)

Accountability, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-ALPA 57 PRODUCCIONES (6/5/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/6/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (5/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-FUSIONA SOLUCIONES ENERGÉTICAS, S.A. (5/17/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/9/2023)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Compania Națională Poșta Română S.A. (5/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Global Baby Brand SRL (5/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (5/24/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Sports betting operator (5/18/2023)

Consent, Lawfulness of Processing, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (6/6/2023)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-AUTOMOBILE BAVARIA SRL (5/18/2023)

Controllers and Processors, Principles, Privacy by Design, Sensitive Data, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-I&S Limited Kft (2/6/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Credit institution (7/14/1905)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-ESTUDIO INMOBILIARIO SAN ISIDRO, S.L.U. (5/9/2023)

Consent, Lawfulness of Processing

Bulgarian Commission for Personal Data Protection (KZLD)-Political party (7/14/1905)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Razmataz Live s.r.l.. (3/2/2023)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Aesse S.r.l.s. (3/9/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-FUNDACIÓ PRIVADA UNIVERSITARIA EADA (5/5/2023)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Coin dealer (9/12/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Debt collection agency (5/4/2023)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Epic Ltd. (2/3/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Company (2/8/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (4/25/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, S.A.U. (4/24/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Brandenburg-Bank (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Data Protection Authority of Brandenburg-Aid organization (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (4/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (3/10/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (4/4/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-TV2 Média Csoport Zrt. (9/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-CITIZENGO FOUNDATION (2/28/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Private individual (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Private individual (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/14/1905)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ENFOKA SISTEMAS GLOBALES, S.L. (4/4/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (3/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. (3/21/2023)

Consent, Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Szczecin-Centrum District Court (1/19/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Edison Energia S.p.A. (12/15/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Private individual (2/21/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Telecommunications company (Unknown)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Amiu S.p.A. (4/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Protection Officer (DPO), Principles, Representative

Italian Data Protection Authority (Garante)-Verizon Connect Italy S.p.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-News service (11/15/2022)

Consent, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Baden-Wuerttemberg-Debt collection company (7/14/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Sats ASA (2/6/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Tecnomed Trento s.r.l. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Belgian Data Protection Authority (APD)-Company (8/23/2022)

Accuracy, Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-PRINTAFORM Ltd. (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Dentist (1/31/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-FACTOR ENERGÍA, S.A. (1/2/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Fondazione Teatro Regio di Torino (10/20/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CASAL DE L’ESPLUGA DE FRANCOLÍ (1/25/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (12/29/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/16/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Ireland-WhatsApp Ireland Ltd. (1/19/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-I-Model s.r.l. (11/10/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L. (1/12/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Areti spa (11/24/2022)

Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-HOSPITAL RECOLETAS PONFERRADA, S.L. (12/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE, S.A.U. (12/15/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/20/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Societatea Energetică Electrica S.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kaufland Romania SCS (12/27/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/10/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-ÉLECTRICITÉ DE FRANCE (11/24/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Ireland-Slane Credit Union Ltd. (1/26/2022)

Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Ireland-Meta Platforms Ireland Limited (11/25/2022)

Privacy by Design

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-OTP LEASING ROMANIA IFN SA (11/25/2022)

Data Subjects Rights, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-Azienda Usl Valle d’Aosta (11/10/2022)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Casa Rusu S.R.L. (12/9/2022)

Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-CÍTRICOS TANTA, S.L. (11/2/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Rapido Finance, S.L. (11/2/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TECHPUMP SOLUTIONS S.L. (10/31/2022)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-XASTRE DO PETO, S.L. (11/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Polish National Personal Data Protection Office (UODO)-Mayor (11/2/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Raiffeisen Bank SA (11/16/2022)

Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP (10/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (9/1/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Ginosa municipality (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Acqua Novara.VCO S.p.a. (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SEAN SERIOS S.L. (10/14/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (10/18/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. (10/9/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-UNION DE OFICIALES DE LA GUARDIA CIVIL PROFESIONAL (10/9/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (10/3/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-EDYTE SA (9/6/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Surveyor (9/21/2022)

Consent, Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Sułkowice Cultural Center (9/7/2022)

Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Banca Comercială Română SA (9/19/2022)

Data Subjects Rights, Principles, Privacy by Design

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Bitfactor SRL (9/22/2022)

Data Subjects Rights, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-Federazione Italiana Sommelier, Albergatori e Ristoratori (6/30/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Property development company (9/21/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MARIELI GABRIELA, S.L. (9/16/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SOLIVESA MASTER FRANCHISE S.L. (8/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Raiffeisen Bank SA (9/9/2022)

Accuracy, Principles

Data Protection Authority of Ireland-Meta Platforms, Inc. (9/5/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-DIGITECNIA SOLUTIONS, S.L. (8/28/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Alpha Bank Romania SA (8/29/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-ECOZONO Y CULTURA, S.L. (7/15/2022)

Consent, Lawfulness of Processing

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Data Protection Authority of Niedersachsen-Company (7/13/1905)

Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (7/26/2022)

Consent, Lawfulness of Processing

Data Protection Authority of Niedersachsen-Hannoversche Volksbank (7/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ESVETEL, S.L. (7/22/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-Telecommunications company (7/21/2022)

Data Subjects Rights, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-Azienda sanitaria universitaria Friuli Centrale (5/26/2022)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda sanitaria universitaria Friuli Occidentale (5/26/2022)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Spanish Data Protection Authority (aepd)-FLY FUT, S.L. (6/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Alquiler Seguro SA (5/24/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/6/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Nos s.r.l.s. (4/28/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-SA Rossel & Cie (6/16/2022)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Wens Experience SRL (6/8/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Norwegian Supervisory Authority (Datatilsynet)-Company (3/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Spanish Data Protection Authority (aepd)-Private individual (5/20/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (5/20/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Roularta Media Group (5/25/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Storage limitation

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kaufland Romania SCS (6/3/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Private individual (5/12/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (5/17/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-LORIS FUEL SHOP SRL (5/12/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Physician (4/22/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Nationale Maatschappij der Belgische Spoorwegen (5/4/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-MISTORE CANARIAS, S.L. (5/3/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MEDEROS MOVITEN, S.L. (4/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Working Capital Management España, S.L. (4/28/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-ISWEB S.p.A. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-JIMBO NETWORKS, S.L. (4/18/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Website operator (4/18/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MOVALIA TRASLADOS, S.L.U. (4/23/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

French Data Protection Authority (CNIL)-DEDALUS BIOLOGIE (4/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Scanshare S.r.l. (2/10/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Fortum Marketing and Sales Polska S.A. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design

Polish National Personal Data Protection Office (UODO)-PIKA Sp. z o.o. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (2/4/2022)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Etterforsker1 Gruppen AS (2/1/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Amazon Road Transport Spain S.L. (2/11/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (2/16/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-IAB Europe (2/2/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SEGURCAIXA ADESLAS, S.A. DE SEGUROS Y REASEGUROS (2/4/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Researcher (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Belgian Data Protection Authority (APD)-EU DisinfoLab (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Data Protection Authority of Brandenburg-Operator of a ballet school (7/12/1905)

Consent, Lawfulness of Processing, Principles

Data Protection Authority of Brandenburg-Medical assistant (7/12/1905)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Enel Energia S.p.A (12/16/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Lawyer (12/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Cyrana España General S.L. (1/31/2022)

Consent, Lawfulness of Processing

Deputy Data Protection Ombudsman-Travel agency (12/16/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-EDUCANDO JUNTOS SL (1/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (1/18/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MEETING PUERTO C.B. (1/17/2022)

Consent, Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Warsaw University of Technology (12/9/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-FUNDACION ESPANOLA DE MEDICINA ESTETICA Y LONGEVIDAD (12/21/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO RITMO DE ANDALUCÍA (12/17/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Sfam España General s.l. (12/22/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-HUBSIDE IBÉRICA S.L. (12/22/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-REAL CLUB NÁUTICO DE RIBADEO (12/28/2021)

Consent, Lawfulness of Processing

French Data Protection Authority (CNIL)-SLIMPAY (12/28/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

French Data Protection Authority (CNIL)-FREE MOBILE (12/28/2021)

Data Subjects Rights, Principles, Privacy by Design, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Communications SA (12/6/2021)

Access Requests (DSAR), Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-NBQ Technology, S.A.U. (12/7/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Norwegian State Pension Fund (SPK) (11/24/2021)

Consent, Data minimisation, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Grindr LLC (12/13/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Car importer (10/27/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles

Hellenic Data Protection Authority (HDPA)-One Way Private Company (12/8/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/23/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/23/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/23/2021)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Icelandic Ministry of Industry and Innovation (11/23/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-UNIÓN FINANCIERA ASTURIANA S.A. E.F.C. (11/24/2021)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Valoris Center S.R.L. (11/26/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/19/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. (10/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/26/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE SERVICIOS, S.L.U. (10/26/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE SERVICIOS, S.L.U. (10/26/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Ultra-Technology AS (9/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE, S.A.U. (10/8/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MAF.COM ESQUI CLUB (10/11/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Sky Italia S.r.l. (9/16/2021)

Consent, Lawfulness of Processing, Principles

Italian Data Protection Authority (Garante)-La Prima S.r.l. (9/16/2021)

Controllers and Processors, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. (8/26/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Ferde AS (9/27/2021)

Controllers and Processors, Data Processing Agreement (DPA), Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Roma Capitale (7/22/2021)

Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Gas inspector (7/30/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/3/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-aiComply S.r.l. (6/10/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Actamedica SRL (8/24/2021)

Controllers and Processors, Data Breaches, Data Processing Agreement (DPA), Data Subjects Rights

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Magyar Telekom Nyrt. (6/18/2021)

Accuracy, Controllers and Processors, Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-PRA Iberia S.L. (7/27/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Body Tonic Shop S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Gerco Fit S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vasco Andaluza de Inversiones S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/2/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Unknown (7/1/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/1/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Marbella Resorts S.L. (7/6/2021)

Controllers and Processors, Data Processing Agreement (DPA)

Italian Data Protection Authority (Garante)-Iren Mercato S.p.A. (5/13/2021)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Huppuís ehf (6/15/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-TNT EXPRESS WORLDWIDE SPAIN, S.L. (6/22/2021)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-Master Distancia S.A. (6/7/2021)

Consent, Lawfulness of Processing

Hellenic Data Protection Authority (HDPA)-KARIERA A.E. (5/12/2021)

Access Requests (DSAR), Data Subjects Rights, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-Fondazione Policlinico Tor Vergata di Roma (4/21/2021)

Data Subjects Rights, Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (5/25/2021)

Controllers and Processors, Data Processing Agreement (DPA)

Data Protection Authority of Ireland-Irish Credit Bureau DAC (3/23/2021)

Accountability, Data Subjects Rights, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-OneDirect Srl (3/25/2021)

Consent, Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (5/14/2021)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-Highcliffe Estates Marbella S.L. (4/20/2021)

Consent, Lawfulness of Processing

Czech Data Protection Auhtority (UOOU)-Public university (7/12/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Czech Data Protection Auhtority (UOOU)-Ski rental company (7/12/1905)

Consent, Controllers and Processors, Data minimisation, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (4/13/2021)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Lugera & Makler Broker S.R.L. (4/19/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Cultural association (3/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/16/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Fastweb S.p.A. (3/25/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Roma Capitale (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Electricity Authority of Cyprus (3/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Filigrana Comunicación S.L.U. (3/10/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NBQ Technology, S.A.U. (3/12/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Data Transfers

Italian Data Protection Authority (Garante)-Istituto Nazionale Previdenza Sociale (INPS) (2/25/2021)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) (12/10/2020)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Krajowa Szkoła Sądownictwa i Prokuratury (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Data State Inspectorate (DSI)-Lursoft IT SIA (2/9/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vamavi Phone S.L. (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Data Transfers

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank N.V. Amsterdam – Bucharest office (2/10/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (2/3/2021)

Accuracy, Data Subjects Rights, Principles

Belgian Data Protection Authority (APD)-Unknown (1/12/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (1/21/2021)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Family Service / N.D.P.K. nv. (1/27/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda Unità Sanitaria Locale Toscana Sud Est (12/17/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (11/18/2020)

Accuracy, Principles

Czech Data Protection Auhtority (UOOU)-Unknown (1/4/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/4/2021)

Accuracy, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Online Services (12/15/2020)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) (12/16/2020)

Controllers and Processors, Data Breaches, Lawfulness of Processing, Performance of Contract, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria, S.A. (12/21/2020)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-Servicio de Alojamientos Responsables, S.L. (12/2/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Asociación de Víctimas por Arbitrariedades Judiciales, (JAVA) (12/2/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (12/9/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Borjamotor, S.A. (12/10/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Iweb Internet Learning, S.L. (9/22/2020)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/12/2020)

Consent, Lawfulness of Processing, Principles

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak (10/23/2020)

Data Subjects Rights, Principles, Privacy by Design

Lithuanian Data Protection Authority (VDAI)-Vilnius City Municipality Administration (10/21/2020)

Accuracy, Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli’ (Private Hospital) (9/30/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Cavauto S.R.L. (8/10/2020)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-Utility Company (1/6/2020)

Consent, Lawfulness of Processing

Data Protection Commision of Bulgaria (KZLD)-T.K. EOOD (2/20/2020)

Data Subjects Rights, Principles, Privacy by Design

Data Protection Commision of Bulgaria (KZLD)-L.E. EOOD (2/20/2020)

Data Subjects Rights, Lawfulness of Processing, Principles, Privacy by Design

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Commercial representative of telecommunication service provider (9/3/2019)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Enel Energie S.A. (Electricity Distributor) (12/16/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/11/1905)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Town of Kerepes (10/1/2019)

Consent, Lawfulness of Processing

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (9/3/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Major of Aleksandrów Kujawski (10/18/2019)

Controllers and Processors, Data Processing Agreement (DPA)

Hellenic Data Protection Authority (HDPA)-PWC Business Solutions (7/30/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-Medical centers (4/8/2019)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UNICREDIT BANK SA (6/27/2019)

Controllers and Processors, Principles, Privacy by Design, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (Unknown)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (Unknown)

Accuracy, Principles

Data Protection Authority of Hamburg-Kolibri Image Regina und Dirk Maass GbR (12/17/2018)

Controllers and Processors, Data Processing Agreement (DPA)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (2/8/2019)

Accuracy, Principles

Austrian Data Protection Authority (dsb)-Private person (12/20/2018)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

“The Landscape of Consent Management Tools – A Data Altruism Perspective” by EU Commission

Consent, Lawfulness of Processing

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg discussion paper on “Legal Foundations in Data Protection for the Use of AI”

AI, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Japan AI Safety Institute’s “Guide to Red Teaming Methodology on AI Safety”

AI, Specific processing situations

Study Finds ChatGPT Can Perform Biometric Tasks: A Closer Look at Privacy Risks

AI, Sensitive Data

Recommendations for the use of AI coding assistants by ANSSI and BSI

AI, Specific processing situations

AIPact by the European Artificial Intelligence Office

AI, Data Subjects Rights, Specific processing situations

Manipulative, Deceptive, and Exploitative AI Systems report by the Dutch DPA

AI, Lawfulness of Processing, Specific processing situations

FTC Targets Deceptive AI Claims with Operation AI Comply

AI, Lawfulness of Processing

OpenAI, Microsoft, and Amazon Join EU’s AI Pact to Shape Future Regulations

California Governor Vetoes AI Safety Bill

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

National Strategy on AI by Sri Lanka

AI, Lawfulness of Processing, Specific processing situations

The Future of European Competitiveness by EU Commission

AI, New technology, Specific processing situations

Belgian DPA General Secretariat Artificial intelligence systems and the RGPD from a data protection perspective

AI, Lawfulness of Processing, Principles, Specific processing situations, Transparency

Tech Giants Sign Open Letter Urging “Regulatory Certainty on AI” in Europe

LinkedIn Used User Data for AI Training Before Updating Its Terms

AI, Data Sharing, Data Subjects Rights, Lawfulness of Processing

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Artificial Intelligence and Machine Learning in Health Care and Medical Sciences Best Practices by Pitfalls Gyorgy J. Simon Constantin Aliferis Springer

AI, Health Data, Principles, Sensitive Data, Specific processing situations

Report of the work undertaken by the ChatGPT Taskforce by EDPB

AI, Specific processing situations

Recommendations 02/2021 on the legal basis for the storage of credit card data for the sole purpose of facilitating further online transactions |EPDB

Consent, Lawfulness of Processing

Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive |EPDB

Adequacy Decisions, Data Transfers

Rethinking Privacy in the AI Era | White Paper by Stanford University

AI, Specific processing situations

A pro-innovation approach to AI regulation by UK ICO

AI, Specific processing situations

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

Datenschutzkonforme Künstliche Intelligenz Checkliste mit Prüfkriterien nach DS-GVO

AI, Specific processing situations

Analysis of the final compromise text of the EU AI Act with a view to agreement by the Belgian Presidency

AI, Specific processing situations

[PROPOSAL 2024] EU AI ACT

AI, Specific processing situations

Generative AI framework for HM Government by the UK Central Digital and Data Office

AI, Specific processing situations

Artificial Intelligence Strategy of the CJEU

AI, Specific processing situations

Report on the first review of the functioning of the adequacy decisions adopted pursuant to Article 25(6) of Directive 95/46/EC

Adequacy Decisions, Data Transfers

Interim Report – Governing AI for Humanity by UN AI Advisory Body

AI, Specific processing situations

AI fairness in practice by the Alan Turing Institute

AI, Specific processing situations

Case T-1077/23

AI, Copyright, Specific processing situations

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

[DRAFT] FRAMEWORK CONVENTION ON ARTIFICIAL INTELLIGENCE, HUMAN RIGHTS, DEMOCRACY AND THE RULE OF LAW

AI, Specific processing situations

The NYT vs OpenAI and Microsoft

AI, Copyright, Specific processing situations

European Commision press release on AI Act Agreement

AI, Specific processing situations

New rules for Artificial Intelligence – Questions and Answers by the European Commision

AI, Specific processing situations

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL LAYING DOWN HARMONISED RULES ON ARTIFICIAL INTELLIGENCE (ARTIFICIAL INTELLIGENCE ACT)

AI, Specific processing situations

Practical Guide on Controller to Processor Contracts by the Irish DPC

Controllers and Processors, Data Processing Agreement (DPA)

AI Act Provisional Agreement Press Release

AI, Specific processing situations

PRACTICAL GUIDANCE FOR THE USE OF GENERATIVE ARTIFICIAL INTELLIGENCE IN THE PRACTICE OF LAW by State Bar of California

AI, Specific processing situations

Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence (PROPOSED MEMORANDUM )

AI, Specific processing situations

The impact of the General Data Protection Regulation (GDPR) on artificial intelligence by the EU Parliamnet

AI, Specific processing situations

Guidelines for secure AI system development by UK NCSC and US CISA

AI, Specific processing situations

Benefits and Risks of Generative Artificial Intelligence Report by the State of California

AI, Specific processing situations

Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive by EDPB

Consent, Lawfulness of Processing

Exceeding customer expectations by Google

Principles, Privacy by Design

COMMON GUIDEPOSTS TO PROMOTE INTEROPERABILITY IN AI RISK MANAGEMENT | German Ministry of labor and social Affairs

AI, Specific processing situations

Generative AI: The Data Protection Implications by CEDPO

AI, Specific processing situations

Global Toolkit on AI and the Rule of Law for the Judiciary by UNESCO

AI, Specific processing situations

AI Privacy Policy template

AI, Specific processing situations

AI and Data Protection Risk Toolkit by UK ICO

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence by the US President

AI, Specific processing situations

Automated Decision-Making Under the GDPR by the FPF

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

AI How-to Sheets by CNIL

AI, Specific processing situations

Description of the dataset template by CNIL

AI, Specific processing situations

Opinion 44/2023 on the Proposal for Artificial Intelligence Act in the light of legislative developments

AI, Specific processing situations

Artificial intelligence and the Information Privacy Principles by the Privacy Commisioner (New Zealand)

AI, Specific processing situations

How to use AI and personal data

AI, Specific processing situations

Recommendations 1-2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

Code of Conduct, Controllers and Processors

C-61/19

Consent, Lawfulness of Processing

C-129/21

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Erasure

C-102/20

Consent, Lawfulness of Processing

C-205/21

Consent, Criminal Convictions and Offences, Lawfulness of Processing, Principles

Recommendation 4: Seek parental consent for children under 15 by CNIL

Children as data subjects, Consent, Data Subjects Rights, Lawfulness of Processing

Voluntary AI Safety Standard by the Australian Government

AI, Specific processing situations

Safe and responsible AI in Australia Proposals paper for introducing mandatory guardrails for AI in high-risk settings by Australian Government

AI, Specific processing situations

Global Approaches to Auditing Artificial Intelligence by IPIE

AI, Specific processing situations

Artificial Intelligence Security Governance Framework 1.0 by China Cybersecurity Standardization Technical Committee

AI, Specific processing situations

Multidisciplinary Perspectives on Artificial Intelligence and the Law by Springer

AI, Specific processing situations

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Saudi Data & Artificial Intelligence Authority: Rules governing the appointment of Personal DPOs under the Kingdom of Saudi Arabia’s (KSA) Personal Data Protection Law (PDPL)

AI, Specific processing situations

NSW report: Artificial intelligence in New South Wales

AI, Specific processing situations

Briefing EU Legislation in Progress by EPRS on AI Act

AI, Specific processing situations

Decision by the Federal Administrative Court Austria W137 2252081-1/6E (german)

Consent, Lawfulness of Processing

ON THE ANTITRUST IMPLICATIONS OF EMBEDDING GENERATIVE AI IN CORE PLATFORM SERVICES BY SSRN

AI, Specific processing situations

South Africa National Artificial Intelligence Policy Framework

AI, Specific processing situations

Policy for the responsible use of AI in government by Australian Government

AI, Data Processing by the Government, Specific processing situations

Consumer Protection in respect of Use of Generative Artificial Intelligence by Hong Kong Monetary Authority

AI, Specific processing situations

The State of Artificial Intelligence in the Pacific Islands

AI, Specific processing situations

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

AI, Liability and Remedies, Specific processing situations, Supervisory Authorities

Data protection code of practice for digital identity schemes in Afrtica

Code of Conduct, Controllers and Processors

Securing Artificial Intelligence: Mitigation Strategy Report by ETSI

AI, Specific processing situations

Data protection compliant AI by Bavarian State Office for Data protection Supervision

AI, Specific processing situations

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Responsible AI Governance in Africa: Prospects for Outcomes Based Regulation by African Observatory on Responsible AI

AI, Specific processing situations

Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework by EDPB

AI, Specific processing situations

Confidential Computing and Privacy: Policy Implications of Trusted Execution Environments by Future of Privacy Forum

AI, Specific processing situations

Formal Opinion 512 on Generative Artificial Intelligence Tools by AMERICAN BAR ASSOCIATION

AI, Specific processing situations

Consent Banner Report Overview of EU and national guidelines on dark patterns by NOYB

Consent, Lawfulness of Processing

National framework for the assurance of artificial intelligence in government by the Australian, state and territory governments

AI, Specific processing situations

Relying on the legal basis of legitimate interest to develop an AI system by CNIL

AI, Specific processing situations

Generative AI Controls Framework Safe, Secure, and Compliant AI Adoption Approach Whitepaper by IBM

AI, Specific processing situations

Patent Landscape Report on Generative AI by WIPO

AI, Specific processing situations

Discussion Paper: Large Language Models and Personal Data by The Hamburg Commissioner for Data protection and freedom of information

AI, Specific processing situations

Data protection impact assessment for AI Solutions by Danish DPA

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Mobilizing the legal basis of legitimateinterest to develop an AI system by CNIL

AI, Specific processing situations

Case 2:24-cv-05140 by the attorney general of California

Consent, Controllers and Processors, Data Sharing, Lawfulness of Processing

Orientations for ensuring data protection compliance when using Generative AI systems by EDPS

AI, Specific processing situations

GDPR & Generative AI A Guide for Customers by Microsoft

AI, Specific processing situations

Risk and control for artificial intelligence and machine learning systems by Cybernetica

AI, Specific processing situations

Governance of artificial intelligence (AI) by House of Commons UK

AI, Specific processing situations

DECISION OF THE INFORMATION COMMISSIONER Snap Inc. and Snap Group Limited

AI, Specific processing situations

Artificial intelligence (AI) and human rights: Using AI as a weapon of repression and its impact on human rights by EU Parliament

AI, Specific processing situations

Neurodata risks report by EDPS and Spanish DPA

AI, Specific processing situations

Orientation guide of the Conference of Independent Federal and State Data Protection Supervisory Authorities by the German Data Protection Conference (DSK)

AI, Specific processing situations

GDPR & GENERATIVE AI – A GUIDE FOR THE PUBLIC SECTOR BY MICROSOFT

AI, Specific processing situations

Convention on AI, Human Rights, Democracy and the Rule of Law – by the Council of Europe (draft)

AI, Specific processing situations

Report of the work undertaken by the ChatGPT Taskforce bg EDPB

A Guide to ICO Audit Artificial Intelligence (AI) Audits by UK ICO

AI, Specific processing situations

Guideline on the massive collection of personal data from the web for the training of generative artificial intelligence (GenAI) models by the Italian Data Protection Authority (Garante)

AI, Data scraping, Specific processing situations

Information note by EDPB on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023

Adequacy Decisions, Data Transfers

EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)

AI, Specific processing situations

Opinion 14/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the United Kingdom |EPDB

Adequacy Decisions, Data Transfers

Opinion 15/2021 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data in the United Kingdom |EDPB

Adequacy Decisions, Data Transfers

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea |EDPB

Adequacy Decisions, Data Transfers

Information Note by EDPB on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent for national security

Adequacy Decisions, Data Transfers

EU-US Data Privacy Framework Template Complaint Form for Submitting Commercial Related Complaints to EU DPAs by EDPB

Adequacy Decisions, Data Transfers

Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms by EDPB

Consent, Lawfulness of Processing

Opinion 23/2021 on the draft decision of the competent supervisory authority of Czech Republic regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EDPB

Code of Conduct, Controllers and Processors

Opinion 24/2021 on the draft decision of the competent supervisory authority of Slovakia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EDPB

Code of Conduct, Controllers and Processors

Opinion 16/2021 on the draft decision of the Belgian Supervisory Authority regarding the “EU Data Protection Code of Conduct for Cloud Service Providers” submitted by Scope Europe |EDPB

Code of Conduct, Controllers and Processors

Opinion 17/2021 on the draft decision of the French Supervisory Authority regarding the European code of conduct submitted by the Cloud Infrastructure Service Providers (CISPE) |EDPB

Code of Conduct, Controllers and Processors

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Report and Recommendations of the New York State Bar Association Task Force on Artificial Intelligence

AI, Specific processing situations

Perspectives on Issues in AI Governance by Google

AI, Specific processing situations

Deploying AI Systems Securely by NSA

AI, Specific processing situations

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea |EPDB

Adequacy Decisions, Data Transfers

Opinion 14/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 15/2022 on the draft decision of the competent supervisory authority of Luxembourg regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 16/2022 on the draft decision of the competent supervisory authority of Slovenia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 5/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework |EPDB

Adequacy Decisions, Data Transfers

Opinion 1/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 02/2023 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Human rights Impact Assessments for AI by Access Now

AI, Data Protection Impact Assessment (DPIA)

GenAI and data protection: how organisations and their employees can use it appropriately and lawfully

AI, Employment

Patrick Breyer v. Germany Case C-582/14, 12 May 2016

Consent, Personal Data

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Data Sharing Code | UK ICO

Data Processing Agreement (DPA)

Guidance on ai and data protection 2.0 | UK ICO

COMMISSION IMPLEMENTING DECISION of 10.7.2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework

Adequacy Decisions, Data Transfers

Members of the Code of Conduct for Cloud Infrastructure Service Providers

Code of Conduct

Artificial Intelligence Risk Management Framework (AI RMF 1.0) by NIST

Guidelines 05/2020 on consent under Regulation 2016/679

Consent, Lawfulness of Processing

Guidelines 4/2019 on Article 25 Data Protection by Design and by Default

Privacy by Design

Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679

Code of Conduct

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them

Privacy by Design

AI Meets Media: OpenAI Secures Another Multi-Year Deal with Media Giant

AI models collapse when trained on recursively generated data

AI, Specific processing situations

The government-wide vision on Generative Al of the Netherlands

AI, Data Processing by the Government, Specific processing situations

AI Possible Risks & Mitigations Optical Character Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI Possible Risks & Mitigations Named Entity Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI system development: CNIL’srecommendations to comply with the GDPR

AI, Specific processing situations

Administrative fine against Grindr LLC by The Norwegian Data Protection Authority

Consent, Lawfulness of Processing, Principles, Sensitive Data

AI Auditing Checklist for AI Auditing by EDPB

AI, Specific processing situations

AI, DATA GOVERNANCE AND PRIVACY SYNERGIES AND AREAS OF INTERNATIONAL CO-OPERATION BY OECD

AI, Specific processing situations

Supervision of AI systems in the EU by Dutch DPA and RDI (english)

AI, Specific processing situations

Statement on the interplay between AI Act and GDPR for private sector by the The Austrian DPA

AI, Specific processing situations

AI Development Recommendations to Ensure GDPR Compliance by CNIL

AI, Specific processing situations

The Colorado AI Act “Senate Bill SB24-205”

AI, Specific processing situations

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Rules of Procedure for the “Informal Panel of EU DPAs”according to the EU-US Data Privacy Framework by EDPB

Adequacy Decisions, Data Transfers

Template Complaint Form to the U.S. Office of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO) by EDPB

Adequacy Decisions, Data Transfers

Privacy, seriously by the UK ICO

AI, Privacy by Design, Product Privacy Design

AI and Data Protection risk toolkit by the UK ICO

AI, Data Protection Impact Assessment (DPIA)

Australian ACMA DoorDash Technologies Australia Pty Ltd

Consent, Liability and Remedies

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

Sending direct marketing messages: At-a-glance guide (UK ICO)

Consent, Lawfulness of Processing

The EDPB data protection guide for small business

AI, Risk Management